Jump to content

Recommended Posts

Hi Pop Pickers,


Just had an email stating that I had been billed ?31.29 for a Led Zeppelin album, from iTunes.

I am a Led Zeppelin fan but do not order downloads - so a bit odd.

Then I noticed the link 'If you did not authorize this purchase' Click here for Refund.

Sure enough, I rang my bank and there has been no debit of this amount, so it was just someone trying to get me to put my bank details on line as seems to be the latest scam.


Watch out! Go and buy some vinyl albums from Sainsbury's instead

Link to comment
https://www.eastdulwichforum.co.uk/topic/140660-internet-scam-music-downoads/
Share on other sites

The are many 'phishing' emails going around. These are designed to make you think they are from some legitimate corporation. They are generally designed to do one of a couple of things:


1) either get you to hand over your login and password to a site they can get your money (through bank details or credit card details) or buy stuff on your account. So, generally banks, ebay, iTunes, Amazon, etc.


2) get you to either open an attachment or go to a website that will cause you to download something. This will install something bad onto you computer that will either hang around waiting for you to type in passwords, help in attacks on other sites or, as is common of late, encrypt everything on your computer and ask you for ransom money to restore it.


So, be very, very careful and look carefully at any email that asks you to click on a link or open an attachment. If you are worried, contact the business/government department or whatever, or log in the way you normally do, WITHOUT using anything from the email itself in term of links.


In general...


1) if the email does not refer to you directly by name, be suspicious. If it refers to you by your email address be very suspicious.


2) if the email says 'we need you to log in/change your password' because of some upgrade/security issue/something scary/money coming your way, be very suspicious.


3) if the email has an attachment, be really, really suspicious. NEVER open email attachments unless you are 150% sure the email sender is legitimate


4) if you are suspicious, hover your mouse (DO NOT CLICK) on the link that the email is asking you to click. The real address of the internet site will show up in at the bottom of your browser. If this does not look exactly as you would think, be extremely suspicious.


If you have clicked through and filled out a form with your login details, change your password NOW and contact the company to tell them something has happened. If you have opened an attachment, do not use your computer for anything financial and seek professional assistance.


There are bad people out there. They pose as business, banks, HMRC, parking tickets... just about everything you can think of. Be careful - and be suspicious.

Can anyone throw light on what happened here?


In December I emailed a client in Poland our work bank details. Some weeks later I found out from my contact in that company that several hours after my email arrived she received another one, which appeared to come from me but with different bank details. This is where she made a payment to.


She sent me the 2nd email she had received and on opening it and choosing 'reply' I saw the actual address for me was '[email protected]'. Not my address. My work PC was taken out of operation. However we have still no idea what has happened apart from something fraudulent.


I don't know how my work PC was compromised so it is all a bit of a mystery. Any ideas?

That's plausible apart from the bit I didn't mention. On the same day she received another email from 'me' which I would have had no reason to send.It had an attachment which related to an entirely different company. When she sent this fake email to me I saw it was from the same source as the previous one.


From this I deduced the problem was at our end. However the purpose of this 2nd fake email doesn't make any sense as it had nothing to do with a request for payment or contained anything particularly confidential.

Very odd...a test to see if emails from "your" address got through her spam filter, maybe? Or more sinister, could the irrelevant one have carried the virus, bot or whatever which opened up her inbox so they could read your mail and so send her the money demand? Which one did she get first?

It is easy to "copy" an email address - I'm not good with describing things... someone else can make it appear to a recipient that the email sent has come from someone else and there nothing anyone can do about it. It's not even considered "illegal" in itself although obviously the content is then questionable and such.


If you are sending someone personal details via email you really should break it up in different emails, with a different subject so it does not create a thread.


For the annoying purchase ones such as Itunes, Paypal, Amazon etc. After initially setting up your account you should assign your contact details to a different email address. That way you can easily identify, easily if it's hotmail/outlook that you get the suspicious emails from, whether they are genuine or not.


If you receive contact from any of the companies that you regularly deal with saying they've had trouble taking payment for something with a link to click always ignore it and sign in to your actual account to see if there is anything outstanding as a payment issue.

> If you are sending someone personal details via email you really should break it up in

> different emails, with a different subject so it does not create a thread.


A mail reader can thread messages in a mail folder using just the chain of references in the header, regardless of subject or even addressee. Your strategy, if it's to be reliable, should avoid sending the successive posts using the Reply button. Even then there's still more than enough information in the headers to enable them to be linked. Encryption, or splitting the content between different communication channels, is more advisable for high risk content.

Alan Medic Wrote:

-------------------------------------------------------

> Can anyone throw light on what happened here?

>

> In December I emailed a client in Poland our work

> bank details. Some weeks later I found out from my

> contact in that company that several hours after

> my email arrived she received another one, which

> appeared to come from me but with different bank

> details. This is where she made a payment to.

>

> She sent me the 2nd email she had received and on

> opening it and choosing 'reply' I saw the actual

> address for me was '[email protected]'. Not my

> address. My work PC was taken out of operation.

> However we have still no idea what has happened

> apart from something fraudulent.

>

> I don't know how my work PC was compromised so it

> is all a bit of a mystery. Any ideas?


Could have been your PC or email system, could have been hers. Doubtful is was anything in the middle.


As KK said, sending an email with spoofed (that's the word, Kel!) headers is trivially easy. Some services rely on this (e.g. Yahoo groups, mailchimp) Even Hotmail can do it, though they have controls in place to stop you doing it when you shouldn't.


So, all the bad people needed do was see the original email. From that they had all they needed - your name, her name and email address, plus the email text so they could create a plausible copy. So, they almost certainly saw it either in your sent mail or the recipient's inbox. Considering they didn't bother to delete the first email, I'd guess it was yours.


Are either your email or hers accessible from the internet? Most are these days, in one form or another.


Sounds like, for the second email, they messed up and meant to send it to a different victim.

ianr Wrote:

-------------------------------------------------------

> > If you are sending someone personal details via

> email you really should break it up in

> > different emails, with a different subject so it

> does not create a thread.

>

> A mail reader can thread messages in a mail folder

> using just the chain of references in the header,

> regardless of subject or even addressee. Your

> strategy, if it's to be reliable, should avoid

> sending the successive posts using the Reply

> button. Even then there's still more than enough

> information in the headers to enable them to be

> linked. Encryption, or splitting the content

> between different communication channels, is more

> advisable for high risk content.



I was in no was suggesting this is a "reliable" way at all.


Personally, one should not be sending details like bank numbers and such via email, but of course I understand for many people it is the only option.

What I was suggesting was simply a "IF". As mentioned by separate, not related emails - meaning not using the reply button (separate emails wouldn't require this). It is far from perfect but if you do not have the powers or knowledge to go through the encryption route, and this is your only option it can work still with risk.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Latest Discussions

    • I thoroughly recommend Jay from JK Electrical Contractors who is an NICEIC registered. NICEIC is the UK's leading certification body for the electrical contracting industry and conducts regular audits and assessments on all its members. It is the specialist trade body which certifies professional electricians.  Jay completed the installation of a 19 way consumer unit for us and works to the highest standards and our entire electrical installation is now fully compliant with 18th Edition of the electrical wiring regulations. Before installing the new CU he traced and corrected faults that had developed over the last 25 years -some of which were my DIY bodges that were non-compliant.  We now have an installation that is 100% safe and  reliable . His contact details are :- 0208 150 6450 [email protected] Here is what he installed for us.
    • I fully support this petition, however it will need to be shared far & wide to be effective. Also there is always a huge amount of interest / objection during the festival, but not so much when they start consulting for the next one, usually around January. It's crucial that everyone that has been impacted makes their voice heard then.  A couple of points which may be good to include in the wording (if it is still possible to amend?) - The total tickets sold are way more than 3000. The licence allows a capacity of up to 9,999, but this may include staff & performers etc. The published attendance for 2024 was:  Friday – 8,999 / Saturday – 9,512 / Sunday – 9,422 So that's c.28,000 people trampling & littering our park over three days - people who have no need or desire to take any care or consideration of our park.  - Gala claim for 2024 that "62% of all ticket holders were from Southeast London and 18% of these were from hyper-local postcode areas SE15 and SE22." So a bit of maths shows that means that around 89% of attendees were not what most people would term 'local'... - Gala have ambitions / plans to extend the number of event days to 6, over two weekends. They applied for a licence for this in 2024, but then withdrew it. Instead they added a "free" event, billed as a community day, to the existing 3 day festival, thereby increasing the event days to 4.  This would appear to be an attempt to set a precedent for increasing the number of event days, and it's inevitable that they will attempt to secure the 6 days they desire for 2026, to increase their profits further. Two weekends in a row of noise, disturbance & disruption would be unacceptable, plus an extra c.18,000 trampling & littering the park... - The site size has been increased. The claim is that it is to compensate for lost storage space due to recent flood alleviation works, but the area has increased by more than the area lost, and appears to have been used for attendee activity rather than site storage. Gala have often stated that the festival can only be located in the park because the footprint has been designed specifically for that area, and yet this year the footprint had been amended & extended without any apparent issues. Surely this proves that it could be relocated?  Apologies, I just can't help going into rant mode on this issue, but hopefully some of the above may be helpful in increasing the argument presented by the petition?
    • Best to just get in touch with the council. You need to see what works were approved and the scope.  It's probably advisable to get an independent legal survey (not a standard RICS) and look at current condition, what they said they'd fix, if they did what they said and what the problems are with what they did. Was it just your flat and the other flat mentioned? Asking in case there's any other leaseholder/ tenant involved  
Home
Events
Sign In

Sign In



Or sign in with one of these services

Search
×
    Search In
×
×
  • Create New...